Job Search

We are seeking a Senior Security Consultant to join a growing Security Strategy, Risk and Compliance Services team. This is an opportunity to advise a diverse range of clients on improving their information security, governance and resilience. You will work closely with senior stakeholders to understand business risks, develop practical recommendations and support the delivery of security transformation programmes.

Your responsibilities will include leading security assessments, maturity reviews and gap analyses against recognised frameworks and regulatory requirements. You will develop and review security strategies, policies, standards, risk management frameworks and compliance programmes, ensuring they are proportionate, effective and aligned with business objectives. You will also support clients with audit preparation, regulatory engagements, third-party risk management, incident readiness and remediation planning.

As a senior member of the team, you will manage client engagements from planning through to delivery, preparing high-quality reports and presenting findings to technical and executive audiences. You will identify opportunities to improve processes and controls, provide constructive challenge and help clients translate complex security requirements into clear, actionable outcomes. You may also contribute to proposals, practice development, knowledge sharing and the mentoring of less experienced consultants.

We are looking for substantial experience in information security, cyber security, risk, governance or compliance, gained within a consultancy, professional services or complex in-house environment. You should have a strong understanding of frameworks and standards such as ISO 27001, NIST, CIS Controls, COBIT or equivalent, together with knowledge of relevant privacy and regulatory obligations. Experience of security risk assessments, policy development, control testing and working with senior stakeholders is essential.

Excellent communication, analytical and report-writing skills are required, alongside the ability to manage competing priorities and work independently. Professional qualifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor are desirable. The role may involve occasional travel to client sites and offers the opportunity to work on varied, high-impact assignments across multiple sectors.

We are seeking an experienced Cyber Policy Lead to develop, maintain and promote a clear, effective cyber security policy framework. This is an influential role, working across technology, risk, legal, compliance and operational teams to strengthen cyber resilience and ensure that security expectations are understood and consistently applied.

You will lead the creation, review and implementation of cyber security policies, standards and supporting guidance. This will include translating regulatory requirements, recognised industry frameworks and emerging threats into practical organisational controls. You will oversee the policy lifecycle, ensuring that documents remain accurate, proportionate and aligned with changing business needs, technology developments and the wider risk environment.

The role will involve engaging with senior stakeholders to communicate policy requirements, secure approval and support adoption. You will provide expert advice on policy interpretation, assess and manage exceptions, and contribute to governance forums and assurance activities. You will also work with control owners to monitor compliance, identify areas for improvement and support remediation where requirements are not being met.

As part of the wider cyber security function, you will contribute to risk assessments, audits, regulatory reviews and security awareness initiatives. You will be expected to monitor developments in legislation, regulation and threat activity, assessing their potential impact and recommending appropriate responses. The role may also include mentoring colleagues and supporting the development of consistent policy management processes.

Applicants should have substantial experience in cyber security policy, governance, risk or compliance, with a strong understanding of security frameworks such as ISO 27001, NIST or equivalent. Experience of interpreting regulatory obligations and producing clear, practical policy documentation is essential. You will need excellent written and verbal communication skills, sound judgement and the ability to influence stakeholders at all levels.

We are looking for someone who is organised, collaborative and confident operating in a complex environment. Relevant professional qualifications in cyber security, information assurance, risk management or governance are desirable. A commitment to continuous improvement, strong attention to detail and the ability to manage competing priorities will be key to success.

We are seeking a Senior Security Consultant to join a specialist Security Strategy, Risk and Compliance Services team. This is an opportunity to advise clients across a range of industries, helping them understand, manage and reduce cyber security risk while aligning security initiatives with business objectives and regulatory expectations.

You will lead and deliver security consulting engagements, from initial discovery and assessment through to recommendations and implementation planning. Responsibilities will include developing security strategies and roadmaps, conducting risk assessments, reviewing governance frameworks, assessing policies and controls, and supporting compliance against relevant legislation, regulations and industry standards. You will also help clients prepare for audits, improve their security operating models and embed practical, sustainable risk management processes.

The role will involve working closely with senior stakeholders, technology teams and business leaders. You will be expected to communicate complex security and risk matters clearly, produce high-quality reports and presentations, and provide pragmatic advice that can be understood by both technical and non-technical audiences. You may also contribute to bids, thought leadership, service development and the mentoring of less experienced consultants.

Applicants should have substantial experience in cyber security consulting, information security, technology risk, governance, risk and compliance, or a related discipline. You will have a strong understanding of security frameworks and standards such as ISO 27001, NIST, CIS Controls or COBIT, together with knowledge of relevant data protection and regulatory requirements. Experience developing policies, risk registers, control frameworks, assurance programmes or security improvement plans is essential.

Strong analytical, report-writing and stakeholder management skills are required, alongside the ability to manage competing priorities and deliver work to a high standard. Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Lead Auditor would be advantageous. A collaborative mindset, commercial awareness and a commitment to continuous professional development are equally important.

We are seeking a Senior Security Consultant to provide expert advice across security strategy, risk and compliance services. This role will support clients in understanding their security posture, managing evolving threats and meeting relevant regulatory, contractual and industry requirements. You will work with senior stakeholders to develop practical, risk-based solutions that strengthen governance, resilience and business performance.

You will lead and contribute to security consultancy engagements, including security strategy development, risk assessments, control reviews, compliance assessments and maturity evaluations. Responsibilities will include interpreting regulatory and industry frameworks, identifying control gaps, producing clear reports and recommendations, and supporting the creation of remediation plans. You will also help clients define policies, standards, procedures and operating models that align security objectives with organisational priorities.

The successful candidate will manage workstreams from initial scoping through to delivery, ensuring that projects remain focused, commercially aware and aligned with agreed outcomes. You will facilitate workshops, present findings to technical and non-technical audiences, coach less experienced colleagues and contribute to the development of repeatable methodologies, tools and service offerings. The role may also involve supporting bids, proposals and client relationship development.

You will have substantial experience in information security, cybersecurity, risk management, governance or compliance consulting, together with a strong understanding of recognised frameworks and standards such as ISO 27001, NIST, CIS Controls or equivalent. Experience of assessing technology, operational and third-party risks, developing security roadmaps and advising senior decision-makers is essential.

Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor or Lead Implementer, are desirable. You should be an excellent communicator with strong analytical, report-writing and stakeholder management skills. The ability to work independently, manage competing priorities and deliver high-quality advice in a consultancy environment is essential. A proactive, collaborative approach and a commitment to continuous professional development are also expected.

We are seeking a Security and Compliance Engineer to help protect critical systems, data and services while supporting a strong culture of risk management and regulatory compliance. This role will work across technology, engineering and operational teams to identify security risks, implement effective controls and promote secure-by-design practices throughout the organisation.

You will be responsible for monitoring and improving security controls across cloud and on-premises environments, reviewing system configurations and supporting vulnerability management activities. You will investigate security alerts and incidents, coordinate remediation, and contribute to post-incident reviews. The role will also involve maintaining security documentation, policies, standards and procedures, ensuring they remain practical, current and aligned with business requirements.

A key part of the position will be supporting compliance with relevant legislation, industry standards and internal governance requirements. You will assist with risk assessments, audit preparation, evidence gathering and the tracking of corrective actions. You will work with stakeholders to assess new technologies and suppliers, provide clear security guidance, and help ensure that projects meet applicable security and compliance expectations.

The successful candidate will have experience in information security, cyber security, compliance engineering or a closely related discipline. You should have a sound understanding of security frameworks and controls, such as ISO 27001, NIST or CIS, together with practical knowledge of vulnerability management, identity and access management, incident response and cloud security. Experience using security monitoring, ticketing and governance tools would be advantageous.

We are looking for someone analytical, organised and confident communicating with both technical and non-technical audiences. You will be able to manage competing priorities, explain complex risks clearly and build constructive working relationships. Relevant professional qualifications or certifications, such as CISSP, CISM, Security+, ISO 27001 or equivalent experience, are desirable. A commitment to continuous learning and a proactive approach to improving security practices are essential.

We are seeking an experienced Cyber Policy Lead to shape and develop cyber security policy across a complex organisation. This is an influential role for someone who can translate emerging cyber risks, regulatory expectations and technical developments into clear, practical and proportionate policy. You will work with senior stakeholders, security specialists, risk teams and business leaders to strengthen cyber resilience and support informed decision-making.

You will lead the end-to-end policy lifecycle, including researching requirements, drafting and reviewing policies, coordinating consultation, securing approval and monitoring implementation. You will maintain a coherent suite of cyber security policies, standards and supporting guidance, ensuring that they remain aligned with relevant legislation, recognised frameworks and organisational risk appetite. The role will also involve identifying gaps, assessing policy effectiveness and recommending improvements.

Key responsibilities will include advising on cyber governance and control requirements; interpreting regulatory and industry developments; contributing to risk assessments and assurance activity; supporting audits and regulatory engagement; and producing concise reports, briefings and recommendations for senior audiences. You will also help embed policy through awareness, communications, training and engagement, ensuring that requirements are understood and applied consistently across varied teams and services.

We are looking for a strong communicator with demonstrable experience in cyber security policy, information security governance, risk or a closely related discipline. You will have a sound understanding of security principles, control frameworks and relevant regulatory obligations, together with the ability to analyse complex information and present it clearly. Experience of working across technical and non-technical communities, managing competing priorities and influencing without direct authority is essential.

Professional qualifications in cyber security, information governance, risk management or policy development would be advantageous. Above all, you will bring sound judgement, attention to detail, a collaborative approach and the confidence to challenge constructively. This is an opportunity to make a visible contribution to cyber maturity while helping create policies that are practical, effective and fit for purpose.

An exciting opportunity has arisen for a UK Head of IT Risk and Compliance to lead the development and delivery of a robust technology risk and compliance framework. This senior role will provide strategic direction, assurance and constructive challenge across information technology, cyber security, data protection and operational resilience.

You will be responsible for maintaining an effective IT risk management programme, ensuring that risks are identified, assessed, recorded and treated consistently. Working closely with technology and business leaders, you will oversee risk appetite, control effectiveness, remediation plans and management reporting, providing clear insight to senior stakeholders and relevant governance forums.

The role will also lead the organisation’s IT compliance and assurance activities, including the interpretation of regulatory requirements, internal policies and recognised industry standards. You will coordinate audits, assessments and control testing, manage responses to findings, and ensure that agreed actions are delivered within appropriate timescales. A key focus will be supporting compliance with UK regulatory expectations, data protection obligations and information security best practice.

You will build strong relationships with internal teams, external advisers and assurance providers, promoting a culture in which risk ownership and continuous improvement are embedded. The role will contribute to third-party risk management, business continuity, disaster recovery, incident management and technology change governance, ensuring that risk considerations are addressed throughout the technology lifecycle.

Applicants should have substantial experience in IT risk, compliance, information security or technology assurance, ideally within a complex and regulated environment. You will bring a strong understanding of control frameworks and standards such as ISO 27001, COBIT, NIST or equivalent, alongside experience of regulatory engagement, audit management and executive-level reporting. Relevant professional qualifications, such as CISA, CRISC, CISSP, CISM or a comparable risk qualification, would be advantageous.

We are seeking an inclusive and confident leader with excellent communication and influencing skills. You will be comfortable translating technical and regulatory issues for non-technical audiences, challenging constructively and delivering practical solutions. This is an opportunity to shape a mature risk culture while supporting secure, resilient and compliant technology services across the UK.

We are seeking an experienced Cyber Policy Lead to shape, develop and maintain a clear, proportionate policy framework that supports secure and effective working across a complex organisation. This is a strategic role requiring strong knowledge of cyber security, governance, risk management and regulatory expectations, alongside the ability to translate technical and legislative requirements into practical guidance.

You will lead the development and review of cyber security policies, standards and supporting procedures, ensuring they remain aligned with current threats, recognised frameworks and applicable legal obligations. Working closely with technology, risk, legal, compliance, audit and operational teams, you will identify policy gaps, assess their impact and agree appropriate improvements. You will also provide authoritative advice on policy interpretation, exceptions and risk acceptance.

The role will involve monitoring changes in legislation, regulation and industry practice, assessing their implications and ensuring that relevant requirements are reflected in internal controls and guidance. You will support assurance activity, contribute to governance forums and prepare clear reports, briefings and recommendations for senior stakeholders. You may also lead awareness initiatives, policy communications and engagement activity to promote secure behaviours and consistent adoption.

We are looking for someone with substantial experience in cyber security policy, governance, risk or compliance, ideally within a large, regulated or public-facing environment. You should have a strong understanding of information security principles, risk-based control frameworks and relevant standards such as ISO 27001, NIST or equivalent. Experience of policy lifecycle management, regulatory change and working with senior decision-makers is essential.

Excellent written and verbal communication skills are required, together with the confidence to influence stakeholders at all levels. You will be organised, analytical and pragmatic, able to manage competing priorities while maintaining attention to detail. Relevant professional qualifications in cyber security, information assurance, risk or governance would be advantageous, as would experience of delivering security awareness or transformation programmes.

An opportunity has arisen for a Principal Adviser, Ethics & Compliance Privacy to provide authoritative advice on privacy, data protection and ethical practice across a complex organisation. This is a senior role for an experienced professional who can translate legislation, regulatory expectations and best practice into practical, proportionate guidance that supports effective decision-making.

You will lead the development, implementation and continuous improvement of privacy and compliance frameworks, policies and procedures. Key responsibilities will include advising on data protection requirements, conducting and reviewing Data Protection Impact Assessments, supporting privacy-by-design approaches, and providing guidance on information-sharing, records management, retention and the lawful use of personal data. You will also contribute to the management of privacy risks, incidents, breaches and regulatory enquiries.

Working with senior leaders and a wide range of internal and external stakeholders, you will promote a strong culture of ethical conduct and accountability. You will deliver training and awareness activities, prepare clear reports and recommendations for governance forums, and monitor compliance with relevant legislation, including the UK GDPR and the Data Protection Act 2018. The role will also involve horizon scanning for legal and regulatory developments and advising on their implications.

We are seeking a confident and credible adviser with substantial experience in privacy, data protection, ethics or compliance, ideally within a large or highly regulated environment. You will have detailed knowledge of UK data protection law, excellent analytical and problem-solving skills, and the ability to communicate complex issues clearly to both technical and non-technical audiences. A relevant professional qualification or membership of an appropriate privacy, legal, risk or compliance body would be advantageous.

You will be organised, pragmatic and able to manage competing priorities while maintaining a high level of professional judgement. The successful candidate will demonstrate integrity, discretion and the ability to influence at senior level, together with a commitment to continuous improvement and responsible use of information.

We are seeking an experienced Cyber Policy Lead to shape and strengthen cyber security policy across a complex, highly regulated environment. This is an influential role for a policy professional who can translate emerging cyber risks, legal requirements and industry standards into clear, practical guidance that supports secure and effective business operations.

You will lead the development, review and maintenance of the cyber security policy framework, ensuring that policies remain proportionate, current and aligned with recognised standards and regulatory expectations. You will assess the impact of emerging threats, technologies and legislation, provide authoritative advice to senior stakeholders, and ensure that policy requirements are understood and consistently applied across the organisation.

Key responsibilities will include establishing policy priorities and a forward-looking roadmap; coordinating consultation and approval activity; defining supporting standards, procedures and guidance; and monitoring compliance through appropriate assurance, reporting and review mechanisms. You will work closely with risk, governance, legal, technology, privacy and operational teams, helping to resolve policy exceptions and strengthen organisational resilience.

The successful candidate will have substantial experience in cyber security policy, governance, risk or a closely related discipline. You will be confident interpreting regulatory and industry requirements and converting them into concise, actionable policy. Experience working with frameworks such as ISO 27001, NIST Cybersecurity Framework or CIS Controls would be advantageous, as would knowledge of information assurance, third-party risk and data protection.

You will be an excellent communicator, able to influence senior decision-makers and engage effectively with both technical and non-technical audiences. Strong analytical, drafting and stakeholder management skills are essential, together with the ability to manage competing priorities and deliver high-quality work in a changing environment. Relevant professional qualifications in cyber security, information risk, governance or policy are desirable.

This role offers the opportunity to make a tangible contribution to cyber resilience, embedding consistent standards and helping people manage security risk with confidence. Flexible working arrangements may be available, subject to business requirements.